drsuapi: Check that the GUID specified in the request is the really the GUID of the NC
authorMatthieu Patou <mat@matws.net>
Sun, 14 Oct 2012 08:06:15 +0000 (01:06 -0700)
committerMatthieu Patou <mat@matws.net>
Sun, 18 May 2014 04:51:15 +0000 (21:51 -0700)
commit38f97c98a61c3a51c6248a3f727adc05858040bd
tree7d5add18ba8df7e82fbc997076d5b79d502e7206
parentf419ca12b589f6a9985af1336b8ddbeb705d917b
drsuapi: Check that the GUID specified in the request is the really the GUID of the NC

Up to now it was possible to specify in the request the GUID of
CN=Computer,DC=domain,DC=tld but DC=domain,DC=tld as the NC's dn and
still avoid the BAD_NC.

This is because the dsdb_find_nc_root for the specified extended dn will
return DC=domain,DC=tld which is the same as the string part of the DN
specified in the request.

Problem was spoted by Andrew Bartlett <abartlett@samba.org>, thanks !

Signed-off-by: Matthieu Patou <mat@matws.net>
source4/rpc_server/drsuapi/updaterefs.c